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Amendments to the Claims 

1 . (Currently amended) A framework tor controlling access rights to digital content in a 
distributed information system comprising: 

first storage means for storing a reference to a user registered in said framework; 
second storage means for storing a reference to digital content registered for said user; 

and 

third storage means for storing a reference to a digital secure repository registered for 
said user, the digital secure repository containing storage means for storing a unique identifier 
and a reference to said digital content, said digital secure repository being associated with said 
user independently of a particular user device and storing access rights to said digital content 
granted to said user by a provider and a list of authorised rendering devices on which said user is 
allowed to render said digital conten t said digital secure repository beina accessible to said user 
independently of said provider so as to allow said user to render said digital content on an 
authorized rendering device in accordance with the access rights stored in said digital secure 
repository without requiring additional authorization from an external authority. 

2. (Previously presented) The framework according to claim 1, further comprising: 
fourth storage means for storing a reference to an authorized rendering device registered 

for said user. 

3. (Original) The framework according to claim I , further comprising: 

a communication link for establishing communication to one or more of the set of said 
secure repository and said rendering device. 

4. (Original) The framework according to claim 1 , wherein said secure repository further 
comprises storage means for storing a digital key for decrypting said digital content 

5. (Previously presented) The framework according to claim I , wherein said secure 
repository further comprises storage means for storing said list of authorized rendering devices. 
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6. (Cancelled) 

7. (Original) The framework according to claim 1, wherein said secure repository further 
comprises storage means for storing a reference to said user. 

8. (Previously presented) The framework according to claim I , wherein said secure 
repository further comprises a communication link for establishing communication to one or 
more of the set of said framework and an authorized rendering device. 

9. (Original) The framework according to claim 1 , wherein the framework is realized as a 
set of web applications forming an Internet web site. 

10. (Original) An Internet web site offering a framework for controlling access rights to 
digital content in a distributed information system according to claim 1 . 

I I . (Currently amended) A method for controlling access rights to digital content in a 
distributed information system comprising the steps of: 

registering a user with a framework for controlling access rights to digital content in said 
distributed information system; 

registering a digital secure repository tor said user, said digital secure repository being 
associated with said user independently of a particular user device, said digital secure repository 
storing access rights to said digital content granted to said user by a provider and a list of 
authorized rendering devices on which said user is allowed to render said digital content , said 
digital secure repository bcinn accessible to said user independently of said provider ; 

registering digital content for said user; and 

controlling the rendering of said digital content in accordance with the access rights to 
said digital content and the list of authorized rendering devices stored in said digital secure 
repository so as to allow said user to render said digital content on an authorized rendering 
device in accordance with the access rights stored in said digital secure repository without 
requiring additional authorization from an external authority. 
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12. (Original) The method according to claim 1 1 , wherein registering a user further 
comprises the steps of: 

receiving a message from said user comprising a reference to said digital secure 
repository; 

validating said reference to said digital secure repository; and 
storing a reference to said user. 

1 3. (Previously presented) The method according to claim 1 1 , wherein registering a digital 
secure repository further comprises the steps of: 

receiving a message from said user comprising credentials of the user; 
validating said credentials; and 

if the credentials are valid, issuing a new digital secure repository, storing a reference to 
saitl issued digital secure repository, and sending it to the user. 

14. (Previously presented) The method according to claim 1 1, wherein registering digital 
content further comprises the steps of: 

receiving a message from said user comprising an order request and a reference to the 
digital secure repository registered for said user; 
validating said reference; and 
if the reference is valid: 

performing purchase formalities; and 
if all formalities are performed: 

encrypting a document encryption key associated with the requested 
digital content with a public key associated with said digital secure repository; 
returning the encrypted document encryption key to the user; and 
registering the purchased digital content for said user. 

1 5. (Previously presented) The method according to claim 1 1 , further comprising the step of 
registering an authori/.ed rendering device tor said user. 
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1 6. {Original) The method according to claim 1 5, wherein registering a rendering device 
further comprises the steps of: 

receiving a message from said user comprising credentials of the user and a reference to 
said rendering device to be registered; 
validating said credentials; 

if the credentials are valid, storing the reference of the rendering device associated with 
said user. 

1 7. (Original) A computer program product Stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perform a method according to 
claim 1 1 . 

1 8. (Currently amended) A method for rendering digital Content on a rendering device 
comprising the steps of: 

receiving a request for rendering digital content in a predetermined form; 

reading information about access rights to said digital content from a digital secure 
repository, said digital secure repository being associated with a user independently of a 
particular user device, said digital secure repository storing access rights to said digital content 
granted to said user by a provider and a list of authorized rendering devices on which said user is 
allowed to render said digital conten t, said digital secure repository being accessible to said user, 
independently of said provider ; and 

if the stored access rights cover die requested form of rendering die digital content and 
the rendering device is on the stored list of authorized rendering devices: 

getting a document encryption key encrypted with a public key associated with 

said rendering device; 

decrypting the document encryption key witii a private key associated with said 

rendering device; 

decrypting said digital content with said document encryption key; and 
rendering said digital content in the requested form so as to allow said user to 
render said digital content on an authorized rendering device in accordance with the 
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access rights stored in s said digital secure repository without requiring additional 
authorization from an external authority. 

1 9. (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of getting a document encryption key further comprises the steps: 

determining from a storage device associated with said rendering device whether or not 
the digital content is bound to said rendering device and if yes receiving said document 
encryption key from said storage device. 

20. (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of getting a document encryption key further comprises the step of 
receiving said document encryption key from a digital secure repository. 

2 1 . (Original) The method tor rendering digital content on a rendering device according to 
claim 1 8, wherein the step of reading from a digital secure repository further comprises the step 
of communicating with said digital secure repository over a communication link. 

22. (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of reading from a digital secure repository further comprises the step 
of retrieving said digital secure repository from a storage device also keeping said digital 
content- 

23. (Original) The method for rendering digital content on a rendering device according to 
claim 18, wherein the step of decrypting said digital content further comprises the step of 
retrieving said digital content from a storage device. 

24. (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of decrypting said digital content further comprises the step of 
retrieving said digital content from over a communication link as downloaded or streaming data. 

25. (Original) A computer program product stored on a computer usable medium, comprising 
DE9-200I-0053-US1 6 09/982,203 
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computer readable program means for causing a computer to perform a method according to 
claim 18. 

26. (Currently amended) A method for binding digital content to a rendering device, the 
method comprising the following steps: 

establishing a connection from said rendering device to a digital secure repository, said 
digital secure repository being associated with a user independently of a particular user device 
and storing access rights to said digital content granted to said user by a provider and a list of 
authorised rendering devices on which said user is allowed to render said digital content , said 
digital secure repository being accessible to said user independently of said provider so as to 
allow said user to render said digital content on an authorized rendering device in accordance 
with the access rights stored in said digital secure repository without requiring additional 
authorization from an externa! authority; 

requesting from said digital secure repository access rights for specified digital content; 

and 

if binding is allowed according to the access rights stored in said digital secure 
repository, receiving a respective document encryption key encrypted with a public key 
associated with the rendering device and storing the encrypted key for later decrypting the 
respective digital content. 

27. (Original) A computer program product stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perform a method according to 
claim 26. 

28. (Currently amended) A method for storing digital content from a rendering device onto a 
storage device, the method comprising the following steps; 

establishing a connection from said rendering device to a digital secure repository, said 
digital secure repository being associated with a user independently of a particular user device, 
said digital secure repository storing access rights to said digital content granted to said user by a 
provider and a list of authorized rendering devices on which said user is allowed to render said 
digital content , said digital secure repository being accessible to said user independently of said 
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provider so as (o allow said user to render said digital content on an authorized rendering device 
in accordance with the access rights stored in said digital secure repository without requiring 
additional authorization from an external authority; 

requesting from said digital secure repository access rights for specified digital content; 

and 

if storing is allowed according to the access rights stored in said digital secure repository, 
receiving respective document encryption keys encrypted with respective public keys of all 
rendering devices registered in said digital secure repository and storing the encrypted keys 
together with encrypted digital content on said storage device. 

29. (Original) A computer program product, stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perform a method according to 

claim 28. 

30. (Currently amended) A method of controlling the rendering of digital content to which a 
user has been granted access rights by a provider, comprising the steps of: 

storing said digital content on a storage device accessible to a user; 

storing said access rights to said digital content in a digital secure repository that is 
associated with said user independently of a particular user devic e and accessible to said user 
independently of said provider : 

storing in said digital secure repository a list of authorized rendering devices on which 
said user is allowed to render said digital content; and 

controlling the rendering of said digital content on a rendering device in accordance with 
the access righLs to said digital content and the list of authorized rendering devices stored in said 
digital secure repository so as to allow said user to render said digital content on an authorized 
rendering device in accordance with the access rights stored in said digital secure repository 
without requiring additional authorization from an external authority. 

3 1 . (Previously presented) A computer program product stored on a computer usable 
medium, comprising computer readable program means for causing a computer to perform a 
method according to claim 30. 
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